Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1020151 > unrolled thread

Bug#966805: thunderbird: OAUTH2 no longer works ("NS_ERROR_NET_INADEQUATE_SECURITY" error)

Back to article view | Back to linux.debian.bugs.dist

Contents

  Bug#966805: thunderbird: OAUTH2 no longer works ("NS_ERROR_NET_INADEQUATE_SECURITY" error) Andrea Borgia <andrea@borgia.bo.it> - 2020-08-02 16:40 +0200
    Bug#966805: thunderbird: OAUTH2 no longer works ("NS_ERROR_NET_INADEQUATE_SECURITY" error) Carsten Schoenert <c.schoenert@t-online.de> - 2020-08-02 22:50 +0200
      Bug#966805: thunderbird: OAUTH2 no longer works ("NS_ERROR_NET_INADEQUATE_SECURITY" error) Andrea Borgia <andrea@borgia.bo.it> - 2020-08-03 23:20 +0200

#1020151 — Bug#966805: thunderbird: OAUTH2 no longer works ("NS_ERROR_NET_INADEQUATE_SECURITY" error)

Package: thunderbird
Version: 1:78.1.0-1
Severity: important

Dear Maintainer,

after upgrading from package 68.10.0-1 to 68.11.0-1, I got a generic login failure for my gmail account, which was already configured to use OAUTH2 and worked fine. 

Then, I removed the saved password and tried again: this time I got a more informative popup with an error message saying  "NS_ERROR_NET_INADEQUATE_SECURITY".

By comparison:
* another machine still running 68.10.0-1 and accessing the same account has no issues; when this second machine is also upgrade, TB stops working on it too.
* the upstream version 78.1.0 does NOT have this issue: I am able to configure my account on a blank profile
* the version from experimental STILL HAS this issue

I tested "experimental" as recommended by reportbug, I do not plan to keep using this version anyway, rather I'll rollback to the previous version because it works (tried it before sending report).
Thanks.

-- System Information:
Debian Release: bullseye/sid
  APT prefers testing
  APT policy: (500, 'testing'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.7.0-1-amd64 (SMP w/4 CPU threads)
Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages thunderbird depends on:
ii  debianutils          4.9.1
ii  fontconfig           2.13.1-4.2
ii  libatk1.0-0          2.36.0-2
ii  libc6                2.31-2
ii  libcairo-gobject2    1.16.0-4
ii  libcairo2            1.16.0-4
ii  libdbus-1-3          1.12.20-1
ii  libdbus-glib-1-2     0.110-5
ii  libevent-2.1-7       2.1.12-stable-1
ii  libffi7              3.3-4
ii  libfontconfig1       2.13.1-4.2
ii  libfreetype6         2.10.2+dfsg-3
ii  libgcc-s1            10.1.0-6
ii  libgdk-pixbuf2.0-0   2.40.0+dfsg-5
ii  libglib2.0-0         2.64.4-1
ii  libgtk-3-0           3.24.20-1
ii  libgtk2.0-0          2.24.32-4
ii  libharfbuzz0b        2.6.4-1+b1
ii  libicu67             67.1-3
ii  libnspr4             2:4.25-1
ii  libnss3              2:3.53.1-1
ii  libpango-1.0-0       1.44.7-4
ii  libpangocairo-1.0-0  1.44.7-4
ii  libpangoft2-1.0-0    1.44.7-4
ii  libstdc++6           10.1.0-6
ii  libvpx6              1.8.2-1
ii  libx11-6             2:1.6.9-2+b1
ii  libx11-xcb1          2:1.6.9-2+b1
ii  libxcb-shm0          1.14-2
ii  libxcb1              1.14-2
ii  libxext6             2:1.3.3-1+b2
ii  libxrender1          1:0.9.10-1
ii  libxt6               1:1.1.5-1+b3
ii  psmisc               23.3-1
ii  x11-utils            7.7+5
ii  zlib1g               1:1.2.11.dfsg-2

Versions of packages thunderbird recommends:
ii  hunspell-en-us [hunspell-dictionary]  1:2019.10.06-1
ii  hunspell-it [hunspell-dictionary]     1:6.4.3-1

Versions of packages thunderbird suggests:
ii  apparmor          2.13.4-3
ii  fonts-lyx         2.3.5.2-1
ii  libgssapi-krb5-2  1.17-10

-- no debconf information

[toc] | [next] | [standalone]

#1020218

Hello Andrea,

Am 02.08.20 um 16:26 schrieb Andrea Borgia:
> Dear Maintainer,
> 
> after upgrading from package 68.10.0-1 to 68.11.0-1, I got a generic
> login failure for my gmail account, which was already configured to
> use OAUTH2 and worked fine. >
> Then, I removed the saved password and tried again: this time I got a
> more informative popup with an error message saying
> "NS_ERROR_NET_INADEQUATE_SECURITY".

this is related to the http2 protocol which is used for Oauth. The root 
for this isn't Thunderbird but libnss3.
Thunderbird did not have a tight enough dependency on this library in 
testing, unstable but also in experimental.

For unstable I pushed a fixed version (see #966806).

As you opened this report against the version of Thunderbird in 
experimental I'll ket this report open until a fix is prepared, should 
be done by the next version for experimental.

You can fix your current problem by installing libnss3 from unstable.

-- 
Regards
Carsten

[toc] | [prev] | [next] | [standalone]

#1020445

> For unstable I pushed a fixed version (see #966806).

This explains why I could not find this bugreport when I searched for 
gmail at first: it was filed right after mine :D


> As you opened this report against the version of Thunderbird in 
> experimental I'll ket this report open until a fix is prepared, should 
> be done by the next version for experimental.

Yeah, I noticed it too late that I ran reportbug when I had the 
experimental package instead of the one from testing. As a general rule, 
is it bad to file bugs against experimental?


> You can fix your current problem by installing libnss3 from unstable.

Apparently it migrated already to testing, very well, checking now.

Yes, works fine, thank you.

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.bugs.dist

csiph-web